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Timeline Correlation: Hammond and Anarchaos 

1 March 2012 



17*3 CST 
I am moral observed 
leaving residence 




17r03 -18:22 
CST: Haimm ond 
away from 
residence 




1B:22 CST: 
Hamnrond 
returns to 
residence. 



> 



18:22 CST - 24:00 CST: Ha mmp nd remai ns at resid ence. 



A 



ANARCHAOS 



17*1 CST: CHS 
reports Anarchaos 
online. 




17*4- 18:23 CST; 
Aiwchaos offline. 




1S-JA CST: CHS 
re- ports Anarchaos 
online. 



> 



18:15 - 24:00 CST: No CHS reporting for this time period. 
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Timeline Correlation: Hammond and Anarchaos 

2 March 2012 



^ 00:00 — 13:52 CST: Hammond in residence 


13:52- 14:04 
CST: Hammond 
out of residence. 


14:04 - 24:00 CST: Hammond in residence. 





00:00-24:00 CST: No CHS reporting for tti is time period. 
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Timeline Correlation: Hammond and Anarchaos 

3 March 2012 




00:00- 14:17 CST: Hammond at residence. 



04:17— 15iZ£ 
CST: Hammcrd 
out of residence. 



15:16 20:14 CST: 
Hammond at 
residence. 



\~ 2<kl4- 24.-00 CST: \. 

^ Hammond out of ^ 
f residence f 



QOifM -20:13 CST: No CHS reporting forthis time period. 



5 



20:13 CST: CHS reports 
that Anarohaos is off! ine 



> 



Hammond's camp liter activity. Shaded regions indicate Hammond observed out of residence: 



Observed Network Activity: 2012-03-03 00:00:00 CST - 2012-03-04 00:00:00 CST 



£ ls*02 




All Network Traffic 



I Tor Network Traffic 



&874 
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Timeline Correlation: Hammond and Anarchaos 

4 March 2012 



00:00 - 03:18 CSTe 
Hammond out of residence. 



00:00 - 03s37 CST: No CHS 
reportingfor this time period. 



Q3:1B -0PK)QCST: Hamfnond at resideince 

\. 03:37 CST: CHS 

\ reportsthflt > 
Ariarcriacs online. 




